Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes how ori44 ("ori44", "we", "us", "our") collects, uses, stores, shares, and protects personal information about individuals ("you", "User", "Player") who register accounts, visit our website, or otherwise interact with the ori44 platform and services.

This Policy is incorporated into and forms part of the ori44 Terms and Conditions. By creating an ori44 account, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with this Policy, you must not use the ori44 platform.

ori44 takes the protection of your personal data seriously. We are committed to being transparent about our data practices and ensuring that your information is handled with care, integrity, and in compliance with applicable data protection laws and international gaming authority requirements.

---

2 Data Controller

For the purposes of applicable data protection legislation, ori44 is the data controller in respect of personal data collected through the ori44 platform. ori44 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is lawful, fair, and transparent.

You may contact ori44's data privacy team regarding any data-related enquiry or request by reaching out via our Live Chat (available 10am–2am MYT, 7 days a week) or by email at [email protected] (plain text — not a clickable link).

---

3 Information We Collect

ori44 collects personal information that is necessary for the operation of a regulated gaming platform, the prevention of fraud and money laundering, and the provision of a personalised player experience. The categories of personal data we collect include:

3.1 Registration Data

When you create an ori44 account, we collect your full legal name, date of birth, residential address, email address, Malaysian mobile number (e.g., +60 1X-XXXX XXXX), and chosen login credentials.

3.2 Identity Verification Data

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, ori44 may request copies of government-issued identity documents (such as your Malaysian MyKad or passport) and proof of address documentation. This data is processed only to the extent required for verification and compliance purposes.

3.3 Financial Data

We collect information about your deposits, withdrawals, and payment methods. This includes transaction amounts, dates, payment method type (e.g., Touch 'n Go eWallet, DuitNow, Maybank2u), and transaction references. We do not store full payment credentials on our own servers — these are handled by our certified payment processing partners.

3.4 Gaming Activity Data

ori44 maintains records of your gaming activity on the platform, including games played, bet amounts, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, regulatory compliance, and responsible gaming monitoring.

3.5 Technical & Device Data

When you access ori44, we automatically collect technical data including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, and pages visited. This information is used for security monitoring, platform analytics, and fraud prevention.

3.6 Communications Data

If you contact ori44 support via Live Chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

---

4 How We Use Your Data

ori44 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your ori44 account, process login requests, and manage your player profile and preferences.
• Transaction Processing: To process MYR deposits and withdrawals through your chosen payment method, and to maintain accurate financial records.
• Identity Verification: To verify your identity and age in compliance with KYC requirements and to prevent underage gambling on the ori44 platform.
• Regulatory Compliance: To comply with applicable gaming regulations, AML obligations, and international gaming authority requirements, including reporting obligations where legally mandated.
• Security & Fraud Prevention: To monitor for, detect, and prevent fraudulent activity, unauthorised account access, multi-accounting, and other prohibited conduct on ori44.
• Responsible Gaming: To monitor gaming patterns and intervene where necessary to support responsible gambling, including applying self-exclusion restrictions and responding to at-risk player indicators.
• Platform Improvement: To analyse how players use ori44 and to improve the platform's features, performance, and user experience.
• Customer Support: To respond to your enquiries, complaints, and requests through ori44's Live Chat and email support channels.
• Marketing Communications: Where you have opted in, to send you information about ori44 promotions, bonuses, and new game releases. You may opt out at any time.

---

5 Legal Basis for Processing

ori44 processes personal data on the following legal grounds:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to provide the ori44 gaming and betting services you have registered for.
• Legal Obligation: Processing required to comply with our AML, KYC, and regulatory obligations under applicable gaming authority requirements.
• Legitimate Interests: Processing carried out for ori44's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring, where those interests are not overridden by your rights.
• Consent: Where you have given explicit consent for a specific processing activity, such as receiving marketing communications. You may withdraw consent at any time.

---

6 Sharing Your Data

ori44 does not sell your personal data to third parties. We may share your personal information with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Financial institutions and e-wallet operators (including Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks) that process your deposit and withdrawal transactions.
• Game Content Providers: Certified game studios whose software powers games available on ori44. These providers may receive limited technical data necessary for game delivery and RNG certification.
• Identity Verification Services: Third-party KYC and age verification service providers used to fulfil our regulatory obligations.
• Regulatory Authorities: Applicable gaming authorities and law enforcement agencies where ori44 is legally required or obligated to disclose information.
• IT & Security Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who support the operation of the ori44 platform, subject to appropriate data processing agreements.

All third-party service providers are required to implement appropriate technical and organisational security measures and to process personal data only as instructed by ori44 and in accordance with applicable data protection requirements.

---

7 International Transfers

ori44 operates as an online platform and some of our service providers may be located outside Malaysia. Where personal data is transferred internationally, ori44 takes appropriate steps to ensure that such transfers are subject to adequate safeguards — including contractual obligations — consistent with applicable data protection standards.

---

8 Data Retention

ori44 retains personal data for as long as is necessary for the purposes set out in this Policy and to comply with our legal obligations. As a general rule:

• Account data is retained for the duration of your account relationship with ori44 and for a minimum period of five (5) years following account closure, in accordance with AML/KYC record-keeping requirements.
• Transaction and gaming records are retained for a minimum of five (5) years following the date of the transaction.
• Support communications are retained for three (3) years following resolution of the relevant matter.
• Marketing preference records are retained until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, ori44 will securely delete or anonymise your personal data.

---

9 Cookies & Tracking Technologies

ori44 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. The categories of cookies we use include:

• Essential Cookies: Strictly necessary for the ori44 platform to function — including maintaining your login session, storing your language preferences, and enabling core security features. These cookies cannot be disabled.
• Analytics Cookies: Used to understand how players navigate and use ori44 — such as which pages are visited most frequently, how long sessions last, and where errors occur. This data is aggregated and anonymised.
• Functional Cookies: Used to remember your preferences and personalise your ori44 experience, such as your preferred game view or lobby layout.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of the ori44 platform, including your ability to remain logged in.

---

10 Security Measures

ori44 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the ori44 platform
• Encrypted storage of sensitive account data, including hashed and salted password storage (plain-text passwords are never stored)
• Multi-factor authentication for new device logins and account security actions
• Real-time monitoring and alerting for suspicious account activity and login anomalies
• Restricted internal access to personal data on a need-to-know basis, with access logging
• Regular security assessments and penetration testing of the ori44 platform infrastructure

Whilst ori44 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ori44 will notify you without undue delay in accordance with applicable notification obligations.

---

11 Your Rights

Subject to applicable law and ori44's legal obligations, you have the following rights in relation to your personal data held by ori44:

• Right of Access: You have the right to request a copy of the personal data that ori44 holds about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by ori44.
• Right to Erasure: You may request that ori44 delete your personal data. This right is subject to ori44's legal and regulatory obligations, which may require us to retain certain data for a specified period.
• Right to Restrict Processing: You may request that ori44 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that ori44 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to ori44's processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where ori44 processes your data on the basis of consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact ori44 support via Live Chat or at [email protected]. ori44 will respond to all data rights requests within thirty (30) days of receipt.

---

12 Children's Privacy

The ori44 platform is strictly for adults aged 21 and over. ori44 does not knowingly collect or process personal data from individuals under the age of 21. If ori44 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to close the account and delete the associated data. If you believe a minor has registered an ori44 account, please contact our support team immediately.

---

13 Third-Party Links

The ori44 platform does not contain links to third-party websites. This Policy applies solely to personal data collected through the ori44 website and platform. ori44 is not responsible for the privacy practices of any third-party service providers accessed through the payment or game delivery infrastructure, who operate under their own privacy policies.

---

14 Changes to This Policy

ori44 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the ori44 platform prior to the change taking effect. The date of the most recent revision is stated at the top of this Policy. Your continued use of ori44 following notification of a material change constitutes your acceptance of the updated Policy.

---

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how ori44 handles your personal data, please contact us:

• Live Chat: Available within the ori44 platform, 10am – 2am MYT, 7 days a week
• Email: [email protected] (plain text — not a clickable link)

ori44 aims to acknowledge all privacy-related enquiries within one (1) business day and to resolve complaints within fourteen (14) business days of receipt. If you are not satisfied with our response, you may escalate your complaint to the applicable regulatory authority in your jurisdiction.